Abstract

A significant amount of effort has been dedicated to researching client-side web attacks, including vulnerabilities such as cross-site scripting (XSS), cross-site request forgery (CSRF), and clickjacking. Clickjacking exploits weaknesses in cross-domain isolation and the same-origin policy by deceiving users into clicking on an unintended interface element. In extreme cases, this vulnerability can lead to account compromise with a single click. While detecting the potential for framing a page is straightforward, assessing the real impact of clickjacking attacks proves more challenging. This study presents an automated security testing tool to detect and mitigate clickjacking vulnerabilities in web applications.